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Field of the Invention 

The present invention relates to a payment system and 
method for an electronic commerce eyetem, and more 

10 particularly to a payment system and method utilising at 
least a customer agent and a merchant agent, at least an 
account manager associated with said agents for 
administration of customer accounts and merchant accounts, 
and at least a mediating trusted agent associated with said 

15 at least one account manager and merchant agent for 

checking transactions, for purchases made by a customer 
from a merchant. 

Description of the Prior Art 

20 Different kinds of electronic commerce systems and 

associated payment systems are provided. Some existing 
systems provide only handling of payments, i.e so called 
payment systems, some systems provide full transaction 
services, and other systems provide some transaction 

25 services together with payment services. 

Transactions and payments in such electronic commerce 
systems are done over a communiction network such as the 
public switched telephone network, cellular phone systems, 
the Internet, or an intranet etc- Small payment 

30 transactions are denoted micro payments. The goods, such as 
documents, pictures/ software, stock market information, 
etc., are purchased by a customer via a webbrowser from a 
merchant over the Internet . 

Crucial for all existing micro payment schemes is a 
35 very low transaction cost, i.e the transaction cost must be 
at least a magnitude smaller than the price of the goods. 



A 



23/11/99 23:44 STR6M S-J^LIKSSON + PU *JFF & KPSSfiN A N*.032 003 

+4848237897 



p:\lU4fi04.4DC JA 

Ink. t. Patent- octuer.n' ^ 
-.J39 -Vi- ?. 3 

The low prices of the goods implies a lower expectation of 
the security level compared to -full" price systems. 

Further, other requirements on micro payment systems 
ia low price, fast and reliable transfer, and provide 
5 customer integrity. 

For every transaction, money has to be transferred 
from a customer account to a merchant account. Micro 
payment may be considered as one transaction per merchant 
site while as a plurality of transactions in other cases. 
10 The current business model for micro payments is still not 
well understood and different solutions aim for different 
models . 

There are two basic consepta and a number of 
different solutions for each concept on the market. On the 
IS one hand DigiCash, CyberCoin and Millieent are well known 
digital cash solutions representing the first concept and 
on the other hand IBM's MiniPay is a account based 
solution, wherein real money is transferred between 
different accounts, representing the second concept. 
20 The MiniPay is a light weight system and probably 

quite cheap regarding operating costs and user friendly. 

A general description of a prior art account based 
system is described with referens to PIQ 1. 

According to a generic payment system as shown in FIG 
25 1. a merchant 100 displays the goods for sale, e.g on a 

web-page, at step 0. A customer 101 orders goods at step l. 
At step 2. the customer 101 sends a payment ordar to its 
account manager 102. The payment is transferred to a value 
acquirer 103 at step 3. The merchant 100 is notified of the 
30 payment completion by the value acquirer 102 at step 4 and 
the goods are finally delivered. 

A micro payment system such as the IBM MiniPay system 
includes a plurality of necessary features in order to 
operate properly. When a purchasable item is presented on a 
35 customers browser, the Minipay provides desired click and 
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pay features for the order and payment of the goods. 
Further, an eaey way for establishment of the link between 
the goods and the payment eyetem, and the use of the system 
from the customer's as well as the merchant's point of view 
5 has to be provided. The usefulness of the payment system 
increases if it is adaptable to several accounting systems 
like Teleco's billing systems and banking accounts. It must 
be possible to do business in mult i -operator environment. 
The system must be scalable, i.e adaptable for a few users 
10 as well as for millions of users with costs growing not 
more than linearly. For the purpose of distribution the 
system has to run on standard hardware, such as PCs and 
workstations. The value of the goods for sale in a micro 
payment environment is quite low and, consequently, the 
IS security measures should be in haremony with these values. 
Micro payment systems hae to provide limited information 
volume and processing overheads for the transactions. Among 
the required processing tasks are eostumer authentication, 
authorization, and currency exchange rate calculations. 
20 Most of the above mentioned features are solved by the 
MiniPay system. 

However, a problem with the MiniPay system and other 
prior art payment systems is leas good solutions to the 
problem of interoperator transactions, and complex clearing 
25 procedures of transactions within an operator and between 
operators. Another problem is that prior art payment 
systems only support a single or a pair of currencies and 
it is not possible to add new currencies. 

A main problem in digital cash systems and in some 
30 account based systems is double spending, which occures 
when costumers are involved in several transactions 
simultaneously. Customer integrity is a furhter problem in 
electronic commerce systems, i.e merchants can utilise 
customer consumption patterns in undesired ways. 
35 Authentication, authorisation of the customer and the 
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handling of encryption keys are important features in a 
payment system . 

Summary of the invention 

It is an object of the present invention to provide 
an improved electronic payment system for use in an 
electronic commerce system and a method thereof, which 
reduces the transfer and processing costs for each purchase 
by a customer from a merchant in the commerce system. 

Another object of the present invention is to provide 
a payment system not disclosing the customer's identity 
during a trading session. 

It is still another object of the present invention 
to provide secure transactions between a customer and a 
merchant in order to protect the customer's accounts and 
its account manager from abuse. 

It is a further object of the present invention to 
prevent double spending of the customer. 

It ia yet another object of the invention to provide 
and reduce the authentication procedure to a minimum. 

It ie etill a further object of the present invention 
to provide a payment system adaptable to several accounting 
systems. 

A further object of the present invention is to 
enable interoperator transactions. 

Still another object of the present invention is to 
provide a scalable payment system. 

Yet another object of the present invention is to 
support a plurality of currencies. 

These objects are accomplished by a payment system 
and method according to claim 1 and 12, respectively. 
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Brief Description of the Drawings 

In order to explain the invention in more detail and 
the advantages and features of the invention a preferred 
embodiment will be described in detail below, reference be~ 
5 ing made to the accompanying drawings, in which 

PIG 1 is a block diagram showing a network 
configuration of a prior art electronic payment system for 
use in electronic commerce; 

FIG 2 is a block diagram showing a network 
10 configuration of an electronic payment system according to 
the invention for use in electronic commerce, illustrating 
the initiation and continuation of a trading session; and 

FIG 3 is a block diagram showing a network 
configuration of an electronic payment system according to 
15 the invention for use in electronic commerce, illustrating 
the concusion of the trading session; 

Detailed Description of the Invention 

with reference to FIG 2 and 3, a payment system for 

20 use in an electronic commerce system for reducing the 

transfer and processing costs for each purchase made by a 
customer from a merchant, comprises at least a merchant 
agent 200 , such as a server or computer system operated by 
a merchant, a customer agent 201, such as a PC or 

25 workstation operated by a customer, at least an account 
manager 202 provided by an operator associated with said 
agents for administration of customer accounts and merchant 
accounts, and at least a mediating trusted agent or a so 
called value acquirer 203 provided by the operator or 

30 another operator associated with the at least one account 
manager 202 and merchant agent 200 for checking 
transactions during a trading session. 

The customer agent (s) 201 and merchant agent (s) 200, 
the account manager (s) 202 f and the mediating trusted 

35 agent (s) 203 are interconnected by for example an 
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electronic communication network, such ae the Internee, an 
intranet, a public switched telephone network, and/or a 
mobile telephone network, an optical network, or a 
combination thereof, or another kind of communication 
network. 

The main function of the account manager 202 xs to 
administer the customer accounts and trading records, and 
to create and forward billing records to external billing 
systems, such as banks, telecommunication operators, credit 
card firms etc. A merchant or the merchant agent are 
associated like customers to the account manager 202. the 
difference is in the relation to the mediating trusted 
agent 203. 

The mediating trusted agent or value aquirer 203 is a 
part of the micro payment system of the merchant's operator 
and it* function is to check the transaction records when 
trading sessions are terminated and to delicer the 
transaction records to the appropriate account managers of 
the customer and merchant, respectively. 

A relation between a customer 201 and an account 
manager 202 when the customer is logged-on to the account 
manager is denoted a session. Bach session is given an 
identity generated by the customer 201 according to the 
followin illustrative pseudo code expression: 

seselonldenti ty=Account«anagerXdentity. 5e«uencsiiumberl 

The Seesionldentity is generated by a customer agent 
201 when it is logged-in to the account manager 202. The 
Seesionldentity is valid through the complete session. 

A relation between a customer agent 201 and a 
merchant agent 200 when the customer orders goods is 
denoted transaction. Each transaction is given an identity 
when it sis generated by the customer according to the 
following pseudo experssion. 
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Transact ion Jdenti cy=Accoun ttfanager Jdenti try . £eguencenumber2 

The Transactionldentity is generated by the customer 
5 agent 201 when the purchase order for a transaction is 
placed. Further, the Traneactionldentity is valid through 
the complete transaction. 

A method of payment of goods in an electronic 
commerce system according to the invention is divided in to 
10 parts: an initiation phase illustrated in PIG 2, including 
steps regarding the initiation and continuation of a 
trading session; and a conclusion phase illustrated in FIG 
3, including steps regarding the conclusion of a trading 
session. 

IS Hence, in the following description, the micro 

payment system is only partly disclosed. Some well-known 
features such aa the initial contacts between a customer 
and a merchant and che resgistrations and other system 
entities are not described in detail so as not to make the 

20 present invention unclear. 

All involved parties are given an asymetric key pair 
at initiation and algorithms like RSA or DSA are likely to 
be used and all communication except between the customer 
and the merchant ie carried out on secure channels like SSL 

25 or IPSec. 

In the initiation phase, a normal GET URL message is 
used to download a web page and a normal response to the 
GET URL is performed at step 0, i.e a web page with prices 
and information associated for proceeding with the 

30 transaction. The merchant agent 200 receives an order of 
goods/service from the customer agent 201. The customer 
account manager 202 receives an initiation message sent 
from : the customer agent 201, wherein the message includes 
data for registration of the customer agent 201, and order 

35 information with the size of the purchase. The initiation 
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message further comprises the amount of the deposit, a 
transaction identity, the identity of the merchant and the 
identity of the merchant's operator for locating a proper 
mediating trusted agent 203 . 

5 Fruther, the customer account manager 202 provides 

the customer agent 201 with account data during a trading 
session being established between the customer agent 201 
and the merchant agent 20Q over the network- The customer 
account manager 202 amends and forwards the initiation 

l0 message to the mediating trusted agent 203 for registration 
of the customer, and delivering of a deposit. The amended 
initiation message comprises the deposit in the customer 
currency, the customer currency, a customer identifier, the 
transaction identity, and the identity of the merchant. 

15 The mediating trusted agent 203 sends an information 

message including the deposit to the merchant agent 200 . 
The information message comprises the deposit in the 
currency of the merchant, a trading session identity, and 
the customer identifier. The trading session is now ready 

20 to start. 

After the mediating trusted agent 203 has sent an 
information message, the merchant acknowledgies the 
customer and the associated deposit to the mediating 
trusted agent 203. 

25 The mediating trusted agent 203 acknowledges the 

customer and the associated deposit to the customer account 
manager 202. 

The acknowledging including the current exchange rate 
and that the customer account manager 202 forwarding the 
30 exchange rate to the customer agent 201. 

When the customer account manager 202 amends and 
forwards the initiation message to the mediating trusted 
agent 203 the customer is also authenticated. 

When the value of at least one purchase amounts to 
35 the value of the deposit, a clearing procedure is initiated 
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by the perchant 200. If the deposit is consumed and a 
subset purchase attest is made it will be treated as 
an in^ial purchase attest and a new trading session is 
initiated. However, a plurality of transactions can be 
executed within the limit of a single deposxt. 

Additionally, the trading session can be stopped by 
instructions from the customer agent 201 or the merchant 
anent 202 or after a timer expiry. 

Thus, in order to stop or terminate the trading 
session the merchant agent 200 receives a trading session 
terminate message sent by the customer agent 

During the conclusion phase the customer ~««»' 
manager 202 receives a customer — "^"^^ 
the customer agent 201, the customer account manager 202 
sends the customer transaction record to the mediating 
trusted agent 203 and the merchant agent 200 sends a 
merchant transaction record to the mediating trusted agent 



203. 



Further, the mediating trusted agent 203 compares and 
K, evaluates the transaction records, resulting in clearing 
" information. Th. mediating trusted agent 203 se^ 
clearing information to the customer account manager 202 
and a merchant account manager 204. respectively. 

Finally, the customer account manager 202 and a 
25 merchant account manager 204. respectively »«** h * 

clearing information to the customer ^ the 
merchant agent 200. Based on the clearing information, the 
:«tion records are processed to a 

and a deposit record, respectively. ^."f^.*^ 
30 withdrawal record is sent to a customer bi ^ ^ST^^ 
and the deposit record is sent to a merchant billing syste 

206 " It is apparent that the trading session comprises a 
good number of single purchases, thereby reducing the 
35 transfer and processing costs for each purchase as most of 
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Che required transfer and processing are performed at: one 
instant for a large number of purchases. This is especxally 
important for the costly chores, such as 

authenticatoin/authorization and secure money tranter but 
5 also for the currency exchange rate converion. 

The customer identity is not disclosed by the payment 
system, not even to the trusted mediating agent. The 
merchant will only have access to a temporary customer 
identity and the customer public key, which is not 
,0 traceable via the payment system. The merchant must of 
course know the IP address of the customer but one may 
assume that the customer has a dynamic IP address and xt xs 
not traceable without some effort. 

On the merchant side, both the merchant and the 
l 5 merchant's operator have secured their payment from the 

customer's side. In order to protect the customers account 
and the account manager from abuse, secure channels lxke 
SSL or IPSec are used with sufficient strength in the 
encryption algorithms and the associated keys. The same 
20 applies between the merchant and the mediating trusted 

agent . . 
Double spending is impossible since the account 

manager does not hand out deposits beyond its own credit 

limit for the customer. 
2S The PKI (Private Key Infrastructure) is reduced to a 

minimum, because a customer/merchant needs only to know the 

public keys of its clients. The difficult part is the 

operators knowledge of other operators publxk key. Other 

knowledge of public keys is only temporary. 
30 The payment system according to the invention xs 

adaptable to several account systems, because of an *PI xn 

the account manager. 

Further, the system assumes a multioperator 
environment, it is scalable, the number of supported 
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currencies is only limited by the operators willingness to 
sign agreements with other operators. 

Even though numsrous characteristics and advantages 
of the present invention have been set forth in the 
foregoing description, together with details of the 
structure, it is to be understood that the 

illustrative only, and changes may be made in detail within 
the principles of the invention indicated by the broad 
oaneral meaning of the claims. 

For example, in another embodiment of the invention 
the customer agent is a mobile phone communicating with a 
merchant over a mobile telephone network and/or a public 
switched network. 
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CLAIMS 

a. A method of payment of goods in an • 1 « rtr ™ lc 

_f- i eaa t a customer agent 1201 J 
commerce system, utilising at least a c „,„ 
and a merchant agent (200) , at least an account manager 
(202) associated with said agents for administration of 
customer accounts and merchant accounts, and at least a 
mediating trusted agent (203) associated wxth saxd at least- 
one account manager (202) and merchant agent (200) for 
checking transactions, for purchases made by a customer 

from a merchant, . . 

said at least one customer agent (201) and merchant 
agent (200) . aaid at least one account manager (202) . and 
said at least one mediating trusted agent (203) being 
interconnect able by a communication network, 
comprising the atep of: 

said merchant agent (200) receiving an order o£ 
goods/service from said customer agent (201) ; 
characterised by the further steps of: 
a customer account manager (202) receiving an 
initiation message sent from said customer agent (201) . 
S aid message including data for registration of said 
customer agent (201) . and order information; and proving 
said customer agent (201) with account data during a 
trading session being established between said customer 
25 agent (201) and said merchant agent (200) over the network; 
said customer account manager (202) amending and 
forwarding said initiation message to said mediating 
trusted agent (203) for registration of said customer, and 
delivering of a deposit; 

said mediating trusted agent <2«) -ending an 
information message inciuding said depo.it to said merchant 

aaent (200) ; and 

when the value of at least one purchase amounts to 
the value of the deposit, or by instructions from said 
35 customer agent (201) or merchant agent, the trad,ng session 
ia stopped. 



20 
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2. A method according to claim 1, characterised in 
that a plurality of transact ionB is executed within limit 
of said deposit. 

5 

3. A method according to claim l or 2, characterised 
in that said initiation message further comprises the 
amount of the deposit, a transaction identity, the identity 
of the merchant and the identity of the merchant's operator 

10 for locating a proper mediating trusted agent (203) . 

4. A method according to claim 3, characterised in 
that said amended initiation message comprises the deposit 
in the customer currency, the customer currency, a customer 

15 identifier, said transaction identity, and the identity of 
the merchant . 

5. A method according to claim 4, characterised in 
that said information message comprises the deposit in the 

20 currency of the merchant, a trading session identity, and 
said customer identifier. 

6- A method according to any of the preceding claims, 
characterised in that, after the step of said mediating 
25 trusted agent (203) sending an information message, it 
comprises the further step of: 

said merchant acknowledging the customer and the 
associated deposit to said mediating trusted agent (203) . 



30 



7. A method according to claim 6, characterised by 

the further step of : 

said mediating trusted agent (203) acknowledging the 
customer and the associated deposit to said customer 
account manager (202) . 
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8. A method according to claim 7, characfri.ad m 

that said acknowledging including the current exchangerate 
and that said customer account manager 1202) forwarding 
S aid exchange rate to the customer agent (201) - 

A method according to any of the preceding claims, 
characterised in that the step of said customer account 
^aser (202) amending and forwarding said -^ion 
message to said mediating trusted agent (203) further 
comprises the subatep of: 

authenticating the customer. 

10 . A method according to any of the preceding 
claims, characterised in that the step of stopping the 
trading session further comprises the °* ' 

said merchant agent (200) receiving a trading session 
terminate message sent by said customer agent (201) - 

11. A method according to claim 10, characterised by 

the further 9teps of: 

said customer account manager (202) receiving a 
customer transaction record sent by said customer agent 

(201) : . . ^ it a 

said customer account manager (202) sending said 
customer transaction record to said mediating trusted agent 

(203> 'said merchant agent (200) sending a merchant 
transaction record to the mediating trusted agent (203) , 
said mediating trusted agent (203) comparing and 
■ evaluating said transaction records, resulting in clearing 

information ; ■ < ^ 

said mediating trusted agent (203) sending said 
clearing information to said customer account manager (202) 
and a merchant account manager, respectively; and 
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said customer account manager (202) and a merchant 
account manager, respectively, sending said clearing 
information to said customer and said merchant; based on 
said clearing information, proceeeing said transaction 
records to a withdrawal record and a deposit record, 
respectively; storing the transaction records, and sending 
said withdrawal record to a customer billing system and 
said deposit record to a merchant billing system. 

12. A payment system for use in an electronic 
commerce system, comprising at least a customer agent (201) 
and a merchant agent (200) , at least an account manager 
(202) associated with said agents for administration of 
customer accounts and merchant accounts, and at least a 
mediating trusted agent (203) associated with said at least 
one account manager (202) and merchant agent (200) for 
checking transactions, for purchases made by a customer 

from a merchant, . 

said at least one customer agent (201) and merchant 
agent (200) , said at least one account manager (202) . and 
said at least one mediating trusted agent (203) being 
interconnectable by a communication network, 

characterised in that 

said merchant agent (200) is adapted to receive an 
order of goods/service from said customer agent (201) , 

said customer account manager (202) is adapted to 
receive an initiation message sent from said customer agent 
(201) . said message including data for registration of said 
customer agent (201), and order information; and to provide 
said customer agent (201) with account data during a 
trading session being established between said customer 
agent (201) and said merchant agent (200) over the network; 

said customer account manager (202) is adapted to 
amend and forward said initiation message to said mediating 
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trusted agent (203) for registration of said customer, and 
to deliver said deposit? , 
said mediating trusted agent (203) is adapted to send 
an information message including said deposit to said 

merchant agent (200) ; and 

B aid merchant agent (200) and/or customer agent (201) 
are adapted to stop the trading session by their on 
initiative or when the value of at least one purchase 
amounts to the value of the deposit. 

13. A payment system according to claim 12, 
characterised in that said account manager (202) and saxd 
mediating trusted agent (203) are separate modules. 

14 A payment system according to claim 12 or 13. 
characterised in that a plurality of transactions « 
executable within the limit of said deposit. 

15. A payment system according to any of the claims 
20 12-14, characterised in that said initiation message 

further comprises the amount of the deposit, a transaction 
identity, the identity of the merchant and the identity of 
the merchant's operator for locating a proper mediating 
trusted agent (203) . 

25 16 . A payment system according to claim 15. 

characterised in that said amended initiation message 
comprises the deposit in the customer currency 
customer currency, a customer identifier, said transaction 
30 identity, and the identity of the merchant. 

17. A payment system according to claim 16. 
characterised in that said information message comprises 
the deposit in the currency of the merchant, a trading 
35 session identity, and said customer idencifier. 
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IB. A payment system according to any of the claims 
12-17. characterised in that said merchant agent (200) is 
adapted to acknowledge the customer and the associated 
5 deposit to said mediating trusted agent (203) . 

19. A payment system according to claim 18, 
characterised in that said mediating trusted agent (203) is 
adapted to acknowledge the customer and the assocxated 

,o deposit to said customer account manager (202) . 

20. A payment system according to claim 19. 
characterised in that said acknowledging including the 
current exchange rate and that said J""^. co 

IS manager (202) is adapted to forward saxd exchange rate 
the customer agent (201) . 

21. A payment system according to any of the claims 
12-20, characterised in that said mediating trusted agent 
(203) is adapted to authenticate the customer after 
receiving said amended initiation message from saxd 
customer account manager (202) . 

22. A payment system according to any of the claims 
12-21, characterised in that said merchant agent (200) xs 
adapted to receive a trading session terminate message sent 
by said customer agent (201) . 

23 A payment system according to any of the 
preceding claims, characterised in tha, 

sai d customer account ."-^i 2 ^^ J id cusCO mer 
receive a customer traneactxon record sent my 

agent (201) ; 
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said customer account manager (202) is adapted to 
send said customer transaction record to said mediating 

trusted agent (203) ; 

said merchant is adapted to send a merchant 
transaction record to the mediating trusted agent (203) ,- 

said mediating trusted agent (203) is adapted to 
compare and evaluating said customer and merchant 
transaction records and generate clearing information; 

said mediating trusted agent (203) is adapted to send 
said clearing information to said customer account manager 
(202) and a merchant account manager connected to said 
mediating trusted agent (203) via said network, 

respectively; 

said customer account manager (202) and a merchant 
account manager are adapted to send said clearing 
information to said customer and said merchant, 
respectively; based on said clearing information, process 
said transaction records to a withdrawal record and a 
deposit record, respectively, store the transaction 
records; and sending said withdrawal record to a customer 
billing system and said deposit record to a merchant 
billing system. 
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A method and system of payment of goods in an 
electronic commerce system, which reduces the transfer and 
processing costs for each purchase made by a customer from 
a merchant, utilising at least a customer agent (201) and a 
merchant agent (200) . at least an account manager (202) 
associated with the agents for administration of customer 
accounts and merchant accounts, and at least a mediating 
trusted agent (203) associated with the at least one 
account manager (202) and merchant agent (200) for checking 
transactions during a trading session. The at least one 
customer agent (201) and merchant agent (200) . the at least 
one account manager (202) , and the at least one mediating 
trusted agent (203) being interconnected by an electronic 
communication network. 
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